diff --git a/src/routes/test/backups-test.js b/src/routes/test/backups-test.js
index b7083c272..d744bef28 100644
--- a/src/routes/test/backups-test.js
+++ b/src/routes/test/backups-test.js
@@ -84,7 +84,7 @@ describe('Backups API', function () {
 
     describe('create', function () {
         it('fails due to mising token', function (done) {
-            superagent.post(SERVER_URL + '/api/v1/backups')
+            superagent.post(SERVER_URL + '/api/v1/cloudron/start_backup')
                 .end(function (error, result) {
                     expect(result.statusCode).to.equal(401);
                     done();
@@ -92,7 +92,7 @@ describe('Backups API', function () {
         });
 
         it('fails due to wrong token', function (done) {
-            superagent.post(SERVER_URL + '/api/v1/backups')
+            superagent.post(SERVER_URL + '/api/v1/cloudron/start_backup')
                 .query({ access_token: token.toUpperCase() })
                 .end(function (error, result) {
                     expect(result.statusCode).to.equal(401);
@@ -101,7 +101,7 @@ describe('Backups API', function () {
         });
 
         it('succeeds', function (done) {
-            superagent.post(SERVER_URL + '/api/v1/backups')
+            superagent.post(SERVER_URL + '/api/v1/cloudron/start_backup')
                 .query({ access_token: token })
                 .end(function (error, result) {
                     expect(result.statusCode).to.equal(202);
diff --git a/src/server.js b/src/server.js
index 2491a9023..3234fdc89 100644
--- a/src/server.js
+++ b/src/server.js
@@ -134,10 +134,12 @@ function initializeExpressSync() {
     router.del ('/api/v1/cloudron/ssh/authorized_keys/:identifier', cloudronScope, isUnmanaged, routes.ssh.delAuthorizedKey);
     router.get ('/api/v1/cloudron/eventlog', cloudronScope, routes.eventlog.get);
 
-    router.get ('/api/v1/cloudron/backups', settingsScope, routes.backups.list);
     router.post('/api/v1/cloudron/start_backup', settingsScope, routes.backups.startBackup);
     router.post('/api/v1/cloudron/stop_backup', settingsScope, routes.backups.stopBackup);
 
+    // backups
+    router.get ('/api/v1/backups', settingsScope, routes.backups.list);
+
     // config route (for dashboard)
     router.get ('/api/v1/config', profileScope, routes.cloudron.getConfig);